Hi Saifi!

The PEM files are certificates and I believe that every user needs to get
his/her own certificate of install a CA himself. There will NOT be a default
certificate as it would basically violate the whole security of SSL services
- Who is the actual owner of the certificate?

I also believe that there must be a CA package that you might need to
install or if OpenSSL already installs it there should be a command that
creates a certificate.

While I was working on setting up grid computers, OpenSSL was used to create
the trusts and make the system work. But I never had to install a CA package
as the grid middleware itself gave its version of the CA package. And the
other grid I was working with had its own CA (not in my control) which was
trusted in the whole network.

I did find a few links that suggest how to create a CA and SSL Certs -
http://www.octaldream.com/~scottm/talks/ssl/opensslca.html

The solution I think would be to create a certificate and store it in the
directory as factory.pem.

-- 
Navneet Thillaisthanam
Room No: 1024, Highfield Court,
Royal Holloway University of London,
Egham, Surrey, TW20 0TB
United Kingdom.
Mobile: +44-777-499-0752

There are 10 types of people in this world. One who can't understand binary
numbers and the other who can understand them very well!


[Non-text portions of this message have been removed]

Reply via email to